{"metadata": {"vulnerability": "CVE-2023-1671", "count": 87, "kinds": {"milestone": 4, "sighting": 51, "kev": 17, "other": 15}, "linked_omitted": 0}, "data": [{"timestamp": "2023-03-28T00:00:00Z", "date_only": false, "value": "2023-03-28T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-1671", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1671", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-04T10:15:00Z", "date_only": false, "value": "2023-04-04T10:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5F37-M2HF-QPHR", "record": "GHSA-5F37-M2HF-QPHR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-04-04T10:15:00Z", "date_only": false, "value": "2023-04-04T10:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-1671", "record": "GSD-2023-1671", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-04-04T10:15:07.197Z", "date_only": false, "value": "2023-04-04T10:15:07.197", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-1671", "record": "FKIE_CVE-2023-1671", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-04T12:30:30Z", "date_only": false, "value": "2023-04-04T12:30:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5F37-M2HF-QPHR", "record": "GHSA-5F37-M2HF-QPHR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-04T14:36:57Z", "date_only": false, "value": "2023-04-04T14:36:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/61374", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "6f639873-be03-4377-8fcd-51b97d399129", "content": "\u203c CVE-2023-1671 \u203c\n\nA pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/61374"}, {"timestamp": "2023-04-05T00:00:00Z", "date_only": false, "value": "2023-04-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0283", "record": "CERTFR-2023-AVI-0283", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-04-05T15:15:02Z", "date_only": false, "value": "2023-04-05T15:15:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/4254", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "df96833c-8f20-4a99-bebd-3434dde5b03a", "content": "\u0411\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0430\u044f Sophos \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 Sophos Web Appliance (SWA), \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f.\n\n\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e Sophos \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441 \u0434\u044b\u0440\u044f\u0432\u044b\u043c\u0438\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437. \n\n\u041f\u043b\u0435\u0447\u043e\u043c \u043a \u043f\u043b\u0435\u0447\u0443 \u0441\u043e \u0441\u0432\u043e\u0438\u043c\u0438 \u044f\u043f\u043e\u043d\u0441\u043a\u0438\u043c\u0438 \u043a\u043e\u043b\u043b\u0435\u0433\u0430\u043c\u0438 \u0438\u0437 Trend Micro, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0434\u043d\u0430\u0436\u0434\u044b \u0443\u043a\u0440\u0430\u043b\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0443 Mitsubishi Electric.\n\n\u041a\u0430\u043a \u043f\u043e\u043c\u043d\u0438\u0442\u0441\u044f, \u043d\u0435 \u0434\u0430\u043b\u0435\u043a\u043e \u0443\u0448\u043b\u0430 \u0440\u0443\u043c\u044b\u043d\u0441\u043a\u0430\u044f Bitdefender \u0438 \u0447\u0435\u0448\u0441\u043a\u0430\u044f Avast, \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f \u0443\u0436\u0435 \u043f\u0440\u043e \u043c\u0438\u043a\u0440\u043e\u043c\u044f\u0433\u043a\u0438\u0445.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f Sophos Web Appliance 4.3.10.4 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CVE-2023-1671 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f), CVE-2022-4934 (\u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2020-36692 (\u0441\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Sophos bug bounty.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u043e\u0448\u0438\u0431\u043e\u043a \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 warn-proceed \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 RCE, \u0432\u0442\u043e\u0440\u0430\u044f - \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f RCE \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u0441\u0442\u0435\u0440 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439.\n\n\u0422\u0440\u0435\u0442\u044c\u044f XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 JavaScript \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0444\u043e\u0440\u043c\u044b \u043d\u0430 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0435, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u0432 SWA.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043d\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u043e\u043c\u043d\u0438\u0442\u044c, \u0447\u0442\u043e 20 \u0438\u044e\u043b\u044f \u0438\u0441\u0442\u0435\u043a\u0430\u0435\u0442 \u0441\u0440\u043e\u043a \u0441\u043b\u0443\u0436\u0431\u044b SWA, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0432\u043e\u043b\u0448\u0435\u0431\u0441\u0442\u0432\u0430 \u0443\u0436\u0435 \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c.", "url": "https://t.me/true_secator/4254"}, {"timestamp": "2023-04-24T04:35:31Z", "date_only": false, "value": "2023-04-24T04:35:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/525", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "cf79a024-b22e-4a57-ad47-84a55e6df31c", "content": "Sophos Web Appliance Pre-Auth RCE\nhttps://github.com/ohnonoyesyes/CVE-2023-1671\n#github", "url": "https://t.me/CNArsenal/525", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-25T09:47:32Z", "date_only": false, "value": "2023-04-25T09:47:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/road_to_oscp/198", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "7c14b8da-f7bc-4d65-9dbd-4e98109be0e4", "content": "https://vulncheck.com/blog/cve-2023-1671-analysis", "url": "https://t.me/road_to_oscp/198", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-25T15:20:18Z", "date_only": false, "value": "2023-04-25T15:20:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/3316", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "b61f3d8c-d9b9-44f4-812e-c920d86e0fe3", "content": "CVE-2023-1671 | Pre-Auth RCE in Sophos Web Appliance\n\n\nDorkfofa\n\n(title=\"Sophos Web Appliance\" || app=\"Sophos-Web-Appliance\") && title!=\"Sophos Web Appliance\uff1a\u9519\u8bef\u8bf7\u6c42\"\n\nZoomEye\n\ntitle:\"Sophos Web Appliance\"-title:\"Sophos Web Appliance: Forbidden\"-title:\"Sophos Web Appliance: Bad Request\"\n\nShodan\n\ntitle:\"Sophos Web Appliance\"\n\nUsage:\n\npython CVE-2023-1671-POC.py -u http://www.example.com\npython CVE-2023-1671-POC.py -u http://www.example.com -d xxxxxx.dnslog.cn\npython CVE-2023-1671-POC.py -f urls.txt\npython CVE-2023-1671-POC.py -f urls.txt -d xxxxxx.dnslog.cn\n\nDownload: https://system32.ink/news-feed/p/309/", "url": "https://t.me/crackcodes/3316", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-26T00:00:00Z", "date_only": false, "value": "2023-04-26T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Sophos", "record": "CVE-2023-1671", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-26T02:51:58Z", "date_only": false, "value": "2023-04-26T02:51:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4247", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "d570ae2e-e848-48a6-83a2-187c5ea4c5d7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-1671-POC, based on dnslog platform\nURL\uff1ahttps://github.com/W01fh4cker/CVE-2023-1671-POC\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4247", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-26T09:26:57Z", "date_only": false, "value": "2023-04-26T09:26:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2897", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "e5b67174-b948-4aa4-a72c-44bd7c9fc6f0", "content": "Tools - Hackers Factory\n\n\u200b\u200bLTESniffer\n\nAn Open-source LTE Downlink/Uplink Eavesdropper.\n\nThe main purpose of LTESniffer is to support security and analysis research on the cellular network. Due to the collection of uplink-downlink user data, any use of LTESniffer must follow the local regulations on sniffing the LTE traffic.\n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bCVE-2023-1671-POC\n\nBased on dnslog platform.\n\nhttps://github.com/W01fh4cker/CVE-2023-1671-POC\n\n#infosec #cve #poc\n\n\u200b\u200bChattyCaty\n\nOpen-source project which demonstrates an infrastructure to create a polymorphic program using GPT models.\n\nhttps://github.com/cyberark/ChattyCaty\n\n#cybersecurity #infosec\n\n\u200b\u200bprocess-cloning\n\nThe Definitive Guide To Process Cloning on Windows.\n\nhttps://github.com/huntandhackett/process-cloning\n\n#cybersecurity #infosec #pentesting\n\nPentestGPT\n\nA GPT-empowered penetration testing tool.\n\nhttps://github.com/GreyDGL/PentestGPT\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bLinkedinEmails\n\nSearches for employees of a company on #linkedin and generates a list of possible emails.\n\nhttps://github.com/miltinhoc/LinkedinEmails\n\n\u200b\u200bSECMON\n\nWeb-based tool for the automation of infosec watching and vulnerability management with a web interface.\n\nhttps://github.com/Guezone/SECMON\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-27524 \n\nApache Superset Auth Bypass.\n\nScript to check if an Apache Superset server is running with an insecure default configuration (CVE-2023-27524). The script checks if a Superset server's session cookies are signed with any well-known default Flask SECRET_KEYs.\n\nhttps://github.com/horizon3ai/CVE-2023-27524\n\n#infosec #cve #poc\n\n\u200b\u200bZaproxy\n\nThe OWASP Zed Attack Proxy (ZAP) is one of the world\u2019s most popular free security tools and is actively maintained by a dedicated international team of volunteers. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. It's also a great tool for experienced pentesters to use for manual security testing.\n\nhttps://github.com/zaproxy/zaproxy\n\nWebsite:\nhttps://www.zaproxy.org/\n\n#infosec #pentesting #best\n\n\u200b\u200bStackrox\n\nThe StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security by hardening the environment.\n\nhttps://github.com/stackrox/stackrox\n\n#cybersecurity #infosec\n\n\u200b\u200bNuclear Pond\n\nNuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.\n\nhttps://github.com/DevSecOpsDocs/nuclearpond\n\n#cybersecurity #infosec \n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "url": "https://t.me/dilagrafie/2897", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-26T17:15:00Z", "date_only": false, "value": "2023-04-26T17:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-1671", "record": "GSD-2023-1671", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-05-22T03:50:12Z", "date_only": false, "value": "2023-05-22T03:50:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mVJJuhddwk0nA8Y0WuDUjnRRR65E2NyNdIhuciCMQeZEk84", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "8365312a-2908-41e5-b4cb-6676f920fa4d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-22T03:50:55Z", "date_only": false, "value": "2023-05-22T03:50:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/586", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "f9e55658-9661-4076-9954-05ada6bd11f0", "content": "https://github.com/W01fh4cker/CVE-2023-1671-POC", "url": "https://t.me/CNArsenal/586", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-23T17:56:34Z", "date_only": false, "value": "2023-05-23T17:56:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/jokerplstaeen/17304", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "56e0c561-b4ff-4299-8d51-0db8a6e891f3", "content": "\u200b\u200bCVE-2023-1671-POC\n\nBased on dnslog platform.\n\nhttps://github.com/W01fh4cker/CVE-2023-1671-POC\n\n#infosec #cve #poc", "url": "https://t.me/jokerplstaeen/17304", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-15T08:52:16Z", "date_only": false, "value": "2023-09-15T08:52:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4256", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "eeca18a4-8cd4-4bf5-8749-fa04abd10c79", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-1671 POC in python\nURL\uff1ahttps://github.com/c4ln/CVE-2023-1671-POC\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4256", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-14T14:57:42Z", "date_only": false, "value": "2023-10-14T14:57:42+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-1671", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "bfdda251-a7f1-49e3-ab40-9ee1e841343c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:57:42Z", "date_only": false, "value": "2023-10-14T14:57:42+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-1671", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "bfdda251-a7f1-49e3-ab40-9ee1e841343c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-16T00:00:00Z", "date_only": false, "value": "2023-11-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-1671", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1e8bd832-0e95-4f01-84b1-6bd860b71a7d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-16T00:00:00Z", "date_only": false, "value": "2023-11-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-1671", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d81e8f6b-801b-4d72-9b42-ec0cf1f0f473", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-16T00:00:00Z", "date_only": true, "value": "2023-11-16", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-1671", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-11-16T00:00:00Z", "date_only": false, "value": "2023-11-16T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-1671", "field": "evidence.0.details.added_date", "uuid": "d81e8f6b-801b-4d72-9b42-ec0cf1f0f473", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-16T00:00:00Z", "date_only": true, "value": "2023-11-16", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-1671", "field": "evidence.0.details.date_added", "uuid": "1e8bd832-0e95-4f01-84b1-6bd860b71a7d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-16T00:00:00Z", "date_only": false, "value": "2023-11-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-1671", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1e8bd832-0e95-4f01-84b1-6bd860b71a7d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-16T00:00:00Z", "date_only": false, "value": "2023-11-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-1671", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d81e8f6b-801b-4d72-9b42-ec0cf1f0f473", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-16T00:00:00Z", "date_only": false, "value": "2023-11-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-1671", "field": "status.status_updated_at", "uuid": "1e8bd832-0e95-4f01-84b1-6bd860b71a7d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-16T00:00:00Z", "date_only": false, "value": "2023-11-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-1671", "field": "status.status_updated_at", "uuid": "d81e8f6b-801b-4d72-9b42-ec0cf1f0f473", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-16T00:00:00Z", "date_only": false, "value": "2023-11-16T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-1671", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2023-1671 added to CISA KEV"}, {"timestamp": "2023-11-16T18:10:02Z", "date_only": false, "value": "2023-11-16T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "1ef0fc42-dc28-4b97-806f-8abdcd0fca7f"}, {"timestamp": "2023-11-17T07:02:15Z", "date_only": false, "value": "2023-11-17T07:02:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/4162", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "12526951-fb90-41d1-8736-6cd4cb4479a9", "content": "\ud83d\udea8 CISA adds 3 security flaws to its KEV catalog due to active exploitation. \n \nCVE-2023-1671: Enables arbitrary code execution. \nCVE-2023-2551: Affects WebLogic Server. \nCVE-2023-36584: Associated with pro-Russian APT's spear-phishing. \n \nRead: https://thehackernews.com/2023/11/cisa-adds-three-security-flaws-with.html", "url": "https://t.me/thehackernews/4162", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-17T07:07:36Z", "date_only": false, "value": "2023-11-17T07:07:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/1086", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "91c85839-0b06-45ab-8a70-f702023bae32", "content": "CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog\nhttps://thehackernews.com/2023/11/cisa-adds-three-security-flaws-with.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation in the wild.\nThe\u00a0vulnerabilities\u00a0are as follows -\n\nCVE-2023-36584\u00a0(CVSS score: 5.4) - Microsoft Windows Mark-of-the-Web (MotW) Security Feature Bypass Vulnerability\nCVE-2023-1671\u00a0(CVSS score: 9.8) -", "url": "https://t.me/KomunitiSiber/1086"}, {"timestamp": "2023-11-17T07:43:49Z", "date_only": false, "value": "2023-11-17T07:43:49.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Bw0hPsCfuz7Dlo6FsfoY-QgOhbVYq8J767WSGH93YfvkfA", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "1567edc4-796a-46dc-8a25-9f54c4002681"}, {"timestamp": "2023-11-17T10:12:21Z", "date_only": false, "value": "2023-11-17T10:12:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/229", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "564c8b7f-f4e3-4bf5-a4af-262e16f812e1", "content": "\ud83d\udea8 CISA adds 3 security flaws to its KEV catalog due to active exploitation. \n \nCVE-2023-1671: Enables arbitrary code execution. \nCVE-2023-2551: Affects WebLogic Server. \nCVE-2023-36584: Associated with pro-Russian APT's spear-phishing. \n \nRead: https://thehackernews.com/2023/11/cisa-adds-three-security-flaws-with.html", "url": "https://t.me/tengkorakcybercrewz/229", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-17T10:12:21Z", "date_only": false, "value": "2023-11-17T10:12:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/2790", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "1b91100b-b4c4-4bcc-bba2-d615ef2b7fbc", "content": "\ud83d\udea8 CISA adds 3 security flaws to its KEV catalog due to active exploitation. \n \nCVE-2023-1671: Enables arbitrary code execution. \nCVE-2023-2551: Affects WebLogic Server. \nCVE-2023-36584: Associated with pro-Russian APT's spear-phishing. \n \nRead: https://thehackernews.com/2023/11/cisa-adds-three-security-flaws-with.html", "url": "https://t.me/tengkorakcybercrewz/2790", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-20T13:32:52Z", "date_only": false, "value": "2023-11-20T13:32:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/150489", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "4e31b16f-c83a-40f3-9290-6343580d56fe", "content": "https://ift.tt/NMZfn6e\nSophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671)", "url": "https://t.me/ctinow/150489", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-07T00:00:00Z", "date_only": true, "value": "2023-12-07", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-1671", "field": "evidence.0.details.due_date", "uuid": "1e8bd832-0e95-4f01-84b1-6bd860b71a7d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:20:42.206Z", "date_only": false, "value": "2023-12-13T01:20:42.206097Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-1671", "record": "GSD-2023-1671", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-07-17T00:33:01Z", "date_only": false, "value": "2024-07-17T00:33:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/8177", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "ed4a79bd-50cd-46ed-adf1-9354909853b1", "content": "#exploit\n1. CVE-2023-1671:\nPre-Auth RCE in Sophos Web Appliance\nhttps://vulncheck.com/blog/cve-2023-1671-analysis\n]-> https://github.com/W01fh4cker/CVE-2023-1671-POC\n\n2. CVE-2022-29844:\nBuffer Overflow On WD My Cloud Pro Series PR4100\nhttps://www.zerodayinitiative.com/blog/2023/4/19/cve-2022-29844-a-classic-buffer-overflow-on-the-western-digital-my-cloud-pro-series-pr4100\n\n3. CVE-2023-21554:\nUnauthenticated RCE vulnerability in the MSMQ service\nhttps://www.randori.com/blog/vulnerability-analysis-queuejumper-cve-2023-21554", "url": "https://t.me/CyberSecurityTechnologies/8177"}, {"timestamp": "2024-08-02T05:57:24.840Z", "date_only": false, "value": "2024-08-02T05:57:24.840Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-1671", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:35:42.918Z", "date_only": false, "value": "2024-12-24T20:35:42.918728Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971924", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "b6bf63f5-e393-4816-89cb-6e0b525ea5a0", "url": "https://feedsin.space/feed/CISAKevBot/items/2971924"}, {"timestamp": "2025-01-28T21:14:11.071Z", "date_only": false, "value": "2025-01-28T21:14:11.071255Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-1671", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-28T21:14:11.071Z", "date_only": false, "value": "2025-01-28T21:14:11.071255Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-1671", "record": "FKIE_CVE-2023-1671", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-22T00:00:00Z", "date_only": false, "value": "2025-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "5adad81f-d2a8-4258-b298-5723c9acb3da"}, {"timestamp": "2025-02-23T02:10:49Z", "date_only": false, "value": "2025-02-23T02:10:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "9e05b6f4-41f9-41ff-8755-665b4079fe25"}, {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-02)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "ef85f39b-91a9-4d0c-b74c-595eb78b43d8", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "3fa22667-9a75-4e70-aeed-47e52bd54f2f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-28T00:00:00Z", "date_only": false, "value": "2025-07-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-28)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "31ac6f91-52ec-4e93-a028-637ca536cdbc", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "9e5f05b5-4d63-48d0-b935-c6f6a01357f8", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-14T00:00:00Z", "date_only": false, "value": "2025-08-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "eedbf403-1864-4eb2-bd7d-034aeeb2ae9f"}, {"timestamp": "2025-08-31T03:13:05Z", "date_only": false, "value": "2025-08-31T03:13:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "ecb1008a-6c50-411a-bdec-a03589d16898"}, {"timestamp": "2025-10-21T23:15:21.081Z", "date_only": false, "value": "2025-10-21T23:15:21.081Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-1671", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:21.081Z", "date_only": false, "value": "2025-10-21T23:15:21.081Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-1671", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:43Z", "date_only": false, "value": "2025-10-22T00:32:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5F37-M2HF-QPHR", "record": "GHSA-5F37-M2HF-QPHR", "field": "modified", "linked_record": true}, {"timestamp": "2025-11-09T00:00:00Z", "date_only": false, "value": "2025-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "9acfcc64-7f86-4e69-993e-6992d1be3304", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-12-25T00:00:00Z", "date_only": false, "value": "2025-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-25)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "e39ca351-669d-480b-9a56-1e433c9984b9"}, {"timestamp": "2026-01-05T00:00:00Z", "date_only": false, "value": "2026-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-05)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "6f691ba9-647d-4411-ba68-17066348c2cf"}, {"timestamp": "2026-02-02T12:26:45.885Z", "date_only": false, "value": "2026-02-02T12:26:45.885096Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1e8bd832-0e95-4f01-84b1-6bd860b71a7d", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "fe7bbb16-95a5-45d7-af54-0bd9ddcac2ac", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1e8bd832-0e95-4f01-84b1-6bd860b71a7d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-04T00:00:00Z", "date_only": false, "value": "2026-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "49850cc7-3b41-425d-bce4-b5a6b9d716d0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "c489143e-e2a4-4340-9ced-046b3725b30d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "70d5dd3a-d28b-47dc-b7e4-7b83a0709670"}, {"timestamp": "2026-06-17T05:28:29.373Z", "date_only": false, "value": "2026-06-17T05:28:29.373", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-1671", "record": "FKIE_CVE-2023-1671", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:45.317Z", "date_only": false, "value": "2026-06-19T12:46:45.317243Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1150e7b0-0489-49f8-a78c-afe69afc03a0", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "e05df73c-62f3-4857-86c8-da5a86c79322", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1150e7b0-0489-49f8-a78c-afe69afc03a0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-1671", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "d81e8f6b-801b-4d72-9b42-ec0cf1f0f473", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:48.212Z", "date_only": false, "value": "2026-06-23T14:05:48.212895Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d81e8f6b-801b-4d72-9b42-ec0cf1f0f473", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "062aa2be-6e5f-4345-9824-4ccc835c164b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d81e8f6b-801b-4d72-9b42-ec0cf1f0f473", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:22.740Z", "date_only": false, "value": "2026-06-30T09:23:22.740050Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bfdda251-a7f1-49e3-ab40-9ee1e841343c", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "ff5b883a-ba01-4053-95c9-ccabaf56c8b4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bfdda251-a7f1-49e3-ab40-9ee1e841343c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-13T10:15:33.058Z", "date_only": false, "value": "2026-07-13T10:15:33.058942Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "d09ecb69-ac15-4726-8ce6-99631b714ac6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:00:30.896Z", "date_only": false, "value": "2026-07-29T12:00:30.896210Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13075", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "628270e2-b841-4fed-97f5-9c759d43c6dd", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *cve-2023-1671*\nGithub: https://github.com/csffs/cve-2023-1671", "url": "https://t.me/CVEhub/13075"}, {"timestamp": "2026-07-29T12:00:35.394Z", "date_only": false, "value": "2026-07-29T12:00:35.394463Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11672", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "36013dc1-4755-4699-9e9d-c7e04ff31e13", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1671-POC*\nGithub: https://github.com/c4ln/CVE-2023-1671-POC", "url": "https://t.me/CVEhub/11672"}, {"timestamp": "2026-07-29T12:00:35.673Z", "date_only": false, "value": "2026-07-29T12:00:35.673786Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11540", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "b0454103-9499-43cc-aced-8d3a34821f16", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1671*\nGithub: https://github.com/behnamvanda/CVE-2023-1671", "url": "https://t.me/CVEhub/11540"}, {"timestamp": "2026-07-29T12:00:35.984Z", "date_only": false, "value": "2026-07-29T12:00:35.984808Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11457", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "514d3482-dfc9-4892-ba13-a4d700e9b5a7", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1671-POC*\nGithub: https://github.com/W01fh4cker/CVE-2023-1671-POC", "url": "https://t.me/CVEhub/11457"}, {"timestamp": "2026-07-29T12:00:37.304Z", "date_only": false, "value": "2026-07-29T12:00:37.304687Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11340", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "1d410e10-3715-4d4c-a0d8-eadf4df3d47c", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2023-1671*\nGithub: https://github.com/ohnonoyesyes/CVE-2023-1671", "url": "https://t.me/CVEhub/11340"}, {"timestamp": "2026-07-31T00:00:09.850Z", "date_only": false, "value": "2026-07-31T00:00:09.850164Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13075", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "3b5d78cc-bc95-460f-876a-192fd2cb277a", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *cve-2023-1671*\nGithub: https://github.com/csffs/cve-2023-1671", "url": "https://t.me/CVEhub/13075", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T03:00:03.921Z", "date_only": false, "value": "2026-07-31T03:00:03.921910Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11540", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "4cd291cc-333f-419c-880b-b827030b86cf", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1671*\nGithub: https://github.com/behnamvanda/CVE-2023-1671", "url": "https://t.me/CVEhub/11540", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T03:00:04.376Z", "date_only": false, "value": "2026-07-31T03:00:04.376043Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11672", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "b71815b4-0192-486c-9d4d-a39e6be0efb6", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1671-POC*\nGithub: https://github.com/c4ln/CVE-2023-1671-POC", "url": "https://t.me/CVEhub/11672", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T04:00:04.094Z", "date_only": false, "value": "2026-07-31T04:00:04.094572Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11340", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "2f24c484-1748-4663-b09c-4040bb321409", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2023-1671*\nGithub: https://github.com/ohnonoyesyes/CVE-2023-1671", "url": "https://t.me/CVEhub/11340", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T04:00:04.284Z", "date_only": false, "value": "2026-07-31T04:00:04.284338Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11457", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "4a4b0937-68ea-4f31-9723-2eb4976dfccc", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1671-POC*\nGithub: https://github.com/W01fh4cker/CVE-2023-1671-POC", "url": "https://t.me/CVEhub/11457", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-03T15:00:20Z", "date_only": false, "value": "2026-10-03T15:00:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rmqy4r2ZbbSgIUkJCd_XbrHKxpruNJNPs_qt3HHt61i6SNQ", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "d82b280d-3294-4caf-9945-5f778ec582fb", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-03T15:00:20Z", "date_only": false, "value": "2026-10-03T15:00:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/rmqy4r2ZbbSgIUkJCd_XbrHKxpruNJNPs_qt3HHt61i6SNQ", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "91eecc0e-a99b-4c98-aa0f-1c108b2a77f4"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-1671", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "1e8bd832-0e95-4f01-84b1-6bd860b71a7d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-1671", "field": "timestamps.last_seen_at", "uuid": "bfdda251-a7f1-49e3-ab40-9ee1e841343c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": true, "value": "2026-11-06", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-1671", "field": "evidence.0.details.observation_date", "uuid": "bfdda251-a7f1-49e3-ab40-9ee1e841343c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-1671", "field": "status.status_updated_at", "uuid": "bfdda251-a7f1-49e3-ab40-9ee1e841343c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-08T01:00:03Z", "date_only": false, "value": "2026-11-08T01:00:03+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-1671", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "bfdda251-a7f1-49e3-ab40-9ee1e841343c", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T10:46:34.805Z", "anchors": {"origin": {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1671", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1671", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-04-24T04:35:31Z", "date_only": false, "value": "2023-04-24T04:35:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/525", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "cf79a024-b22e-4a57-ad47-84a55e6df31c", "content": "Sophos Web Appliance Pre-Auth RCE\nhttps://github.com/ohnonoyesyes/CVE-2023-1671\n#github", "url": "https://t.me/CNArsenal/525", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-10-14T14:57:42Z", "date_only": false, "value": "2023-10-14T14:57:42+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-1671", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "bfdda251-a7f1-49e3-ab40-9ee1e841343c", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 16729062.0, "hours": 4646.961666666667, "days": 193.62340277777778, "min_seconds": 16642662.0, "max_seconds": 16729062.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1671", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-14T14:57:42Z", "date_only": false, "value": "2023-10-14T14:57:42+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-1671", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "bfdda251-a7f1-49e3-ab40-9ee1e841343c", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 16729062.0, "hours": 4646.961666666667, "days": 193.62340277777778, "min_seconds": 16642662.0, "max_seconds": 16729062.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1671", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-14T14:57:42Z", "date_only": false, "value": "2023-10-14T14:57:42+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-1671", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "bfdda251-a7f1-49e3-ab40-9ee1e841343c", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1744531.0, "hours": 484.59194444444444, "days": 20.191331018518518, "min_seconds": 1658131.0, "max_seconds": 1744531.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1671", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-04-24T04:35:31Z", "date_only": false, "value": "2023-04-24T04:35:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/525", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "cf79a024-b22e-4a57-ad47-84a55e6df31c", "content": "Sophos Web Appliance Pre-Auth RCE\nhttps://github.com/ohnonoyesyes/CVE-2023-1671\n#github", "url": "https://t.me/CNArsenal/525", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 114173194.805944, "hours": 31714.776334984443, "days": 1321.449013957685, "min_seconds": 114086794.805944, "max_seconds": 114173194.805944, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-1671", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T10:46:34.805Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 97444132.805944, "hours": 27067.814668317777, "days": 1127.8256111799074, "min_seconds": 97444132.805944, "max_seconds": 97444132.805944, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-10-14T14:57:42Z", "date_only": false, "value": "2023-10-14T14:57:42+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-1671", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "bfdda251-a7f1-49e3-ab40-9ee1e841343c", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T10:46:34.805Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 112428663.805944, "hours": 31230.18439054, "days": 1301.2576829391667, "min_seconds": 112428663.805944, "max_seconds": 112428663.805944, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-24T04:35:31Z", "date_only": false, "value": "2023-04-24T04:35:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/525", "record": "CVE-2023-1671", "field": "creation_timestamp", "uuid": "cf79a024-b22e-4a57-ad47-84a55e6df31c", "content": "Sophos Web Appliance Pre-Auth RCE\nhttps://github.com/ohnonoyesyes/CVE-2023-1671\n#github", "url": "https://t.me/CNArsenal/525", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T10:46:34.805Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}